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ABSTRACT 


In the classical application of step-vri.se refinement for program develop' 
ment the successive refinements all attack the sane problem. There are ins- 
tances -when related problems, which admit simpler solutions, are used to 
build up the solution of a complex programming problem. Such manipulations 
change the meaning of the intermediate programs and are named meaning 
altering transformations. 

Use of meaning altering transformations has been illustrated through 
examples. In the process of program construction, both the program and its 
proofs undergo many cycles of parallel transformation before the final pro- 
duct is achieved. Variations in this techniques have been discussed. 

While the utility of this method as a tool of explanation is evident, 
its efficiency as a programming technique cculd be Questioned. A programm- 
ing environment aiding systematic transformations may be needed, in order to 
practically program in this manner. Characteristics repaired of such an 
environment have been outlined. Integration of programs and parallel proof 
manipulation are same of its features. 



1. IFTBODUCTIOiT 


®-th the advance of modern electronic technology the power of 
computers has grown with a speed -unmatched before. Along with 
this, the complexity and size of the programmer's task is also grow- 
ing at the same rate. A progranmer * s task no longer consists in sav- 
ing bits and microseconds but in being able to organize large and 
complex programs, assuring that they perfoxm the function they are 
designed to perform. Inability to handle such complexity in progra- 
mming reduces the confidence level of programs and a lot of effort 
and money is wasted on debugging. 

TSlith a view to master the complexity of programs and improve tfei: 
reliability, a structure has been sought to be introduced in the pro- 
gramming activity. Structured programming has been used as a method 
of explaining programs as well as a programming technique. It enables 
a programmer to tackle problems systematically and confidently, and tc 
produce better and more reliable programs. 

In the classical application of the above method, successive 
refinements all attack the same problem. There exist several instance 
where related problems, which admit simpler solutions, are used to 
build up the solution of a complex programming problem. 

The proofs of correctness of the solutions of related problems, are 
used to derive the proof of correctness of the final solution. In 
the process of " . program construction, both the program and its 
proof undergo many cycles of parallel transformations before the 
final product is achieved. 
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bhile "the utility of this method as a tool of explanation is 
evident, its efficiency as a programming technique could be ques- 
tioned. Yfe need a programming environment aiding systematic trans- 
formations in order to practically program in this manner. The 
characteristics required of such an environment have been outlined. 
Outline of t h e Thesis 

Chapter 2 describes the method of program development with 
stepwise refinment, with an example. Chapter 3 introduces meaning 
altering transformations and explores their usefulness with the help 
of two examples. Related problems are solved first, and the solutions 
are combined to construct the solution for the original problem. 
Chapter 4 contains the variations of meaning altering transf ornotions. 
Chapter 5 contains conclusions and outlines the areas in which future 
work nay be necessary. 



2. STEPWISE HEMHBUE3ST AKD OTHER TRANSFORM APIOFS 


Program development with stepwise refinement or structured program- 
ming has been one of the most recognized and talked about programming 


styles. Dijkstra ' ' and Wirth 


(17, 1:3,1 3) 


offer many examples of programs 


developed in this style. The style has been very lucidly described by 
(l2-) 

Spier in terms of construction of an imaginary picture from basic 
building blocks as follows: 

Step 1 : Act of design : Imagine the picture to be constructed vividly and 
completely. 

Step 2: Modular decompo s ition : Further jfegtee the most convenient and 

natural lines along which the picture can be cut into a limited 
number of pieces. 


Step 3 : Modular 


stepwise refinment . Treat each piece 


as if it were the original picture and repeatedly apply steps 
1,2 and 3 until you deal with a manageable number of elementary 
pieces, which can be trivially constructed with basic building 
blocks. 

Step 4: Bottom up c cnstructian : Construct the elementary pieces with basic 
building blocks. Use these in turn as building blocks for next 
level of pieces. Repeat step 4 until the entire picture has been 
assembled. 

Let the program to be constructed be the imaginary picture, the 
elementary pieces be the primitive subroutines and the basic building 
blocks be program statements. Call the first three steps 'top down design', 
and the last step 'bottom up implementation' and we have the method called, 
structured programming. 
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We shall "take up an example to illustrate the programming style 

just described. This example and the style of solution have been 

(iQ) 

borrowed from lirth . 

Example 2-1 : Sequential Merging 

A set of n = 2^ integer variables is to be sorted using an array, 

A, of size 2n. The variables are initially stored in A [l jthrough 
A[nJ, and may be viewed as sequences of length one in correct order. 

The variables are shuttled between i[ 1 ] through A[n ] and A[n+1 ] through 
A[(2nJ , merging pairs of sequences in ascending order during each move. 

Let the variable 'P 1 denote the size of merged sequences. Let 
i,j and k,l denote the pairsof access points for input part of A and 
output part of A respectively. 

Let 'up* denote the direction of movement of variables. When ’up 1 
is _true, variables are transferred from A[l ] through A[n] to A[n+1 ] 
through A[2n], and vice-versa when 'up 1 is false. 

Repeated application of steps 1 , 2 and 3 appear in Figure 2-1 . 

The pieces in Figure 2-1 are assembled to construct the final ver- 
sion of the sort program, as it appears in Figure 2-2. Though suitable 
for compilation, it is no longer as understandable as the scattered 
pieces in Figure 2-1 are. If, however, the development process as 
depicted in Figure 2-1 is preserved for documentation, one can easily 
follow the transformations carried out on the top level abstract program 
to understand the final program in Figure 2-2. 

All transformations, used in the above example, keep the meaning 
of the program unaltered. We use the term 'refinment ' for the kind of 
transformations used in the example. 



up := true ; p := 1 ; 
repeat 

1: "initialize indices i,j y k y and 1'^ 

2: "merge p~ tuples frcm i-and j -sequences into k-and l-sequences" 
up := — j up; p := 2*p; 

until p = n 


(a) Top level program 


1 i if up then i := 1 ; j := n; 

k := n+1 ; 1 := 2*n; 
else k := 1 ; 1 := n; 
e i := n+1 , j := 2*n 

(b) Piece 1 : Initialize 

2 : m := n, h := 1 ; 
repeat 

m := m - 2 * p; 

2-1 : 'kierge one p-tuple from each of i and j to k, 
increment k after each move by h"; 

2.2: "exchange k and 1" 
until m = 0 

(c) Piece-2: Merge p-tuples. 

2.1 : q := p; r := p; 

repeat select the smaller item 

if lli J <T -1 j then A [k] := d[ i 1 

k := k+h; i :•= i+1 ; q := q-1 ; 
else & [k ] := A[j ]; 

k := k+h; j := j-1 ; r := r-1 : 
fi 

until (q=0) V (r=0) 

2.1.1 :"copy tail of i-sequence"; 

2.1,2:"copy tail of j -sequence" ; 

(d) Piece 2.1 : Copy one pair of p— tuples 


2.2 t := k; k := 1; 1 := t; 

(e) piece : 2.2: Exchange k and 1 

2.1.1: while q ^ 0 do 
begin 

A (k 1 := A[i } 

k := k+h; i := i+1 ; q :=q-1 ; 
end 


Of) piece 2.1.1: Copy tail of i sequence. 


2 . 1 . 2 : 


while r ^ 0 do 

]:=I; j], 

k :=‘k+h; j := j-1 ; 
end 


begin 

‘ iCk 


r 




up := true ; p := 1 ; 
repeat 

if up then i := 1 ; 3 := n; 

k := n+1 ; 1 2*n; 

else k := 1 ; 1 := n; 

i := n+1 ; 3 := 2 *n; 
fi 

m := n, h := 1 ; 
repeat 

m := el - 2 * p; 
g := p; r := p; 
repeat 

if A [i ]<A(j 3 then l[k ] := i[ ij 5 

k i= k+h; i := i+1 ; a 
else A[k ] : = A[j J 

k := k+h; 3 := 3-I ; r 
fi 

until (a= 0 ) V (r= 0 ), 
while q ^ 0 clo 

:= A [i 

k := k+h; i := i+1 ; q := q-1 ; 
end 

•while r ^ 0 do 
begin 

ilk] ==A[jl 

k := k+h; 3 := 3-I ; r := r-1 ; 

end 

until el = 0 
up • =— * up; p := 2*p; 
until p = n 


begin 
Aik ] 


figure 2t2: Final Sort Frogram 
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®i3re is another class of transf ormations 9 which also preserve 
program equivalence* They aid in optimizing the programs to meet 
certain operational constraints. Many optimizing compilers carry out 
such transf o mat ions to optimize programs written in a higher level 
programming language. Schaefer^ ^ offers a theory of such transf orma- 
tions while the ir i „ Program Transf ormati on Catalogue' 1 J is a- source 
book of source-to- source transformations. 



3. MEANING ALTERING TRANSFOBMATI OKS 


Another class of transformations are manually applied to programs 
in computer installations all over the world. Old programs are updated 
or transformed to perform additional functions. These transformations 
do change the meaning of +'.e programs. Often, simple programs become 
more and more complex as a series of transformations are applied to 
them over a period of tine. 

following is a parallel in rocket engineering Quoted by 

( 2 ) 

Khuth . If one takes a cross section of the German V— 2 rocket of 
World War II fame, one finds external skin, structural rods, t&ftk wall 
etc. On the other hand, if one cuts across the Satum-B noon rocket, 
one finds only an external skin, which also f serves as a structural 
component and the tank wall as well. Several functions have been inte- 
grated in one pint cf the rocket . 

Sue ¥-2 rocket would never have been airborne if its designers had 
originally tried to combine all its function. Only after studying the 
simple V— 2 rocket, were they in a position to transform It into a sophis- 
ticated Satum-B rocket. Perhaps, they required a series of transforma- 
tions to arrive at the final result. 

Yfe can find many examples in all disciplines, where simple systems 
are transformed into more complex’and sophisticated systems. Sometimes, 
a number of systems are combined to yield a bigger and more versa- 

tile system. 


8 
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Though used in program, maintenance , such meaning altering trans- 
formations have rarely been used in program development. One example 

(?y\ 

in literature is the garbage collection algorithms of Khuth . Two 
conceptually simple but inefficient algorithms are integrated to give 
a difficult to understand, but efficient algorithm. Saiiasrabuddhe^'^ 
states that, r If transf ornations are to become a programming style , 
the class of available transf ormations would have to be expanded to 
include some which do alter meaning 1 . 

To explore the use of meaning altering transf ornations in program 
development, several examples have been worked out using meaning preservin 
as well as meaning altering transf ormations. 

The programing language in the following examples, is a pseudo 
Pascal^ " ' like language. Proof technique of Hoare w; has been used 
to prove the correctness of the programs* 

Example 5-1 

A set X is defined as follows: 

(i) 1 ex 

(ii ) If ye J then 2 * y + 1 £ X 

and 3 * y + 1 e x (3-1 ) 

(iii) No other element belongs to X. 

Generate first IT elements of X in ascending order. 

We shall assume that the elements of X are to be stored in an 
array named SETX. 

'to 

The input— output conditions to be satisfied by a program^ solve the 


above problem appear below. 



Initial condition ; 


true 


1U 

(3-2) 

Einal condition : SETX[l ] ... SETX [iT ] are first II (3-2 ) 

elements of set X, in ascending order. 

Me can divide the final condition into several parts: 

(i) SET2[l] .... SETX[n] ore elements of X, that is 

R 1 = (V 3 : 1 ^3 4 II) (SETXp] e *) (3-4) 

(ii) SETX[l ] ... SE1X [IT] are in ascending order, that is 

s 2 5 fa : 1 <3 *0)(SETX [d J< SETS [3+1 ]) (3-5) 

(iii) 8ETx[l ] ... SETX[K ]are first N elements of X, that is 

r \ 

Rj - — | (O k)(k X) A (fc <SETX [1TJ ) J 

A((vm : 1 ^m^m)(k ^ SETX[m]))) 

This E^ is the most complex condition of the three and it is not 

obvious how we may establish it in a program. 

The final condition may now be re-written as follows: 

E = 1 A a^A U~ (3-7) 

The top level abstract version of the program appears in Eigure 3-1 

where P is an invariant yet to be derived. 


We can generalize the final condition E to obtain P. P holds where 
i II elements have been stared in SETX. 


p = p Q A ? 2 A p 3 

(3-8) 

where 


P 0 s (1 ^ i ^ H) 

(3-9) 

P 1 - (7| : 3 ^i)(SETX [3] £ X) 

(3-10) 

P 2 S fa =1^3 Ai)(SETX 5 < SETX [ 3 +I 4 ) 

(3-11) 

P, “ l((3k)(k £ X) A (k < SETX [ i] ) 



A ((% : 1 ^ m ^ i)(k ^ SETltm]))) (3-12) 


T“h i <=? oncrcr "ho o.Q-fcaKI cs*h 



‘initialize 1 


r* ^ 

i p i 

mile i ^ F do 
begin 

'a step towards i = F under invariance of P' 


end 

i P A (i = F) J 

Cm 


figure 3-1 : Abstract version of 
solution for X. 
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A'u tills pi>ih£,we make a departure from the conventional stepvri.se 
refinment methodology. Two simpler versions of the problem are intro- 
duced and solved next. Following that, a solution to the original 
problem will be derived from the solutions to the simpler problems. 
Simplified Problems 

Structurally the simpler problems are quite similar to the original. 
Tyro sets X 1 and X ,f are defined. The modified sets are generated in the 
simplified problems using the sane approach as above. That makes the 
problem simpler, then, is the definition of the new sets. 

The set X' is defined as follows: 

(i) 1 e x r 

(ii) If ye X 1 then 2 * y + 1 e x r (3-14) 

(iii) Ho other element belongs to X 1 

The modified problem is to generate the first II elements of X', 
in ascending ordef. 

The final condition and the invariant may now be rewritten as 
follows: 


R 1 s R |X — ^>X T ] @ 

(3-15) 

P 1 s P[X~^X 1 ] 

(3-16) 


1 ' 1 

let us now study closely. In full, looks as follows: 

£3 5 ((3&)(k e X') A (k < SETX [i] ) 

A (te* : 1 (.n < i)(k A SETlfm]))) 


It states that if there is an element of X ! , which is smaller than 
SETxti], it must be one of the elements stored in SETX. From the defi- 
nition of X 1 it is clear that if an element of X 1 is smaller than 
SETlfi]. it can be directly generated by one of the elements in SETX.. 


13 


In otlnr words, 

(k sX') A (k < SEfx[i ])^(3n)(l n <^i) (3-18) 

A(k = 2 * SSE(n] + 1 ) 

At this stage, we -ask which elenent of X T can he the next 
elenent to enter SETX. Answer is that it mst he greater than SEPX i 
and can be directly generated by one of the elements in SETX. 

If we also store the elenents, which are directly generated by 
elenents in SETX and are greater, than SEIX i , in ascending order, 

f * ‘ K 

we achieve the following: 

"I 

(i) It is now easy to establish 

(ii) Next elenent to enter SEIX is the nininun 
of above elenents. 
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2 

P^_ = all elenents of 02 are in ascending order (3-24) 

P^ = Bo other element belongs to 02 (3 -25 ) 

02 is a PIPO queue. 

After the above analysis, it is easy to prove that the jhrogran in 
Pigure 3-2 correctly selves the problem of generating first IT elements 
cf X ! . 

Similarly the set X” is defined as follows: 

(i) 1 e X" 

(ii) If y £ X” then 3 '* y + 1 £ X" (3-26) 

(iii) ITo other element belongs .to X 1 '. 

Hie problem is to generate the first IT elaaents of X", in ascending 
order. 

We can get the final condition B 3 and invariant P 3 after making the 

1 2 

following substitutions in E and P respectively. 

r 3 s B 1 [x J — >X"] (3-27) 

I 3 5 P 2 [ X 1 — ^X n , 02 — y- 05, (y = 2 * SETX|j] + l) 

> (s = 3 * SEIX [j ] + 1 ) ] (3-23) 

A program for constructing tho beginning of X !I can be written 
on the same line as before. Such a program is given without further 
c cements as Pigure 3-3. 
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vtrue C 

L J 

i, SSTX Cl ] := 1,1; 

02<p.2 * SETx[i] + 1; 

r 2 

has been established 
\diile i ^ IT' dc 
begin 


1 := i + 1 ; 

SETX [i ] := ’head (02); .pdg (02); 

02 4=r 2 * SEPX [ i ] + 1 ; 


end 


i?-A (i 

& i 


M)j 


Figure 3-2: A solution for X 1 


where 

head (02) is the element at the head of the queue 02. 
02 y 5 an element with value y j oins 02 . 
jjxop (Qz) = element at the head of 02 is removed. 
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£true^ 

i, SElxt 1 ] := 1,1; 

Q5^= 3*SETX[il +1; 

has been established jj 
while i ^ IT dn 


i := i + 1 ; 

SETX [i ] := head ((B); pop ((B); 
Cg<jrr 3 * SETX [ i ]+ 1; 


end 






figure 3-3 ‘ A Solution for X" 



Solution of the Original Problem 


IT 


We now ask ourselves if we can simply nerge the programs in 
figures 3-2 and 3-3 to obtain one for X. In fact this is possible 
except for the pliice where the next element to enter SETX is picked. 

At that point, we do not know whether to write 

SE03[i] := head (02); 
or SEli i ] := head ( Q5 ) ; 
or both. 

We want to add the snails st eligible elenent to SE1X. Ulus, if 
head (£h) is smaller than head (Cb) then the right action is 
- SE£X[i] := head (Qa); POP(Ch); 

If, however, head (02) is equal to head (05), then we oust include 

just one copy of this elenent in SETX, and delete it frco. both queues: 

SE3S[i] ! ':= head (02); P0P(Q2)j POP(C5); 
with a little exercise, we can write the invariant for the new program 

P 4 - P Q A p 2 /l P 4 /\ P 4 A P 4 (3-29) 

where P^, P^ and P^ are as defined in (3-9), (3-10), and (3-11 ). 

P 4 = p| /> ]| (3-30) 

(3-31) 

P 4 5 P^ A ^ (3-32) 

We claim that the program in Pigure 3-4 correctly solves the 


original problem 
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^ truejj 

i, SBTX [l] := 1,1 i 
02 ^ 2 * SETX [i] + 1 ? 



vAiile i ^ IT do 


Cg4=3*SETX [i] + 1; 


begin 

i := i + 1 ; 

c s ii 

if head (C£)<head ( Cg ) then SEE X [ i ] := head (02), pop(Q2); 

else if head (02) = head (05) then SETx[i] := head (02); 

pop (02); pop(Q3); 

else if head ( 02 ) / head ( 05 ) then SETjE i] •= head ( 05 ) 5 

pop (05); 



2 * SETX 



P 4 A (i = N) 


[ i] + 1 1 eg 4=- 3 * SETX [i] + 1 ; 


Eigure 3-4: A solution for X. 
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Proof of Correctness 

We shall now prove the correctness of the progran in figure 3-4. 

4 

1 . Establi shnent of P before the while loop is trivial. 

2. We have to prove that the execution of the statement 

4 

inside the while loop leaves P invariant. 

We shall first derive the assertions and S_, as positioned 

in figure 3-4. 


(i) S 1 : ^P 4 /(i t IT) j 

i := i + 1 ; 

S P Q /} ? 4 '’ [i— *i - l]j 
(ii) Sg : We have to consider three cases. 

Case 1 : head ( 02 )< head '• ( Q5 ') 

Here, head ( 02 ) is the minimum of the two heads and hence, 
the next element to enter SETS. It should be removed from 02, 

hP 

SEHfi] := head (02); 

POP ( 02 ) ; 

h * b A 4 5 


( 3 - 33 ) 


it is 


( 3 - 34 ) 


Case 2 : head ( 02 ) = head • ( Q5 ) ' j 1 

Here both heads are equal and only one of them should be entered in 
SEIX. However, both of then are removed from respective queues. 

SETX[i] := head (02); 

POP (02); POP (<$); 

5s 1 Ah A P /) P 4 ? 


( 3-35 ) 
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Case 3 : head ( 02 ) head ( 05 ) 

Argument for this ease proceeds along the lines of Case 1 above. 
Combining the three cases, we conclude 

Z 

v ‘ 5 

if 


fi 

| S 2 S S 1 AP/PjAPj ^ (3-36) 

(iii) Two new elements 2 * SETSfi] + 1 and 5 * SETZ[i ] + 1 are 

generated by SETX[i] . and are entered in 02 and 05. Since they are 
greater than 2 / * SETS [ i - l] and 3 * SSTX[i - l] respectively, 02 and 
0$ are still in ascending order. 



( S 3 2 S 2 ^ P 3 b P 1 I 


£5 4==z 3 * SETX [ i ] + 1? 

(3-37) 


Therefore, execution of the while loop leaves T invariant. 

3. We have to prove now that the program teraijiates. The 
value of ! i ' increases by one each tine the while loop is 
executed and i equals IT after H - 1 executions. Therefore, 
we conclude that the program terminates. 

Iron the above arguments, we have succeeded in shoving that the 


program in Figure 3-4 is corr-ect. 
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Optimization 

We shall no?/ apply several transformations to our program, in 
order to get a lower level inplememtioiand to make it efficient. 

Iransf omati on 5 . 1.5 

Instead of storing generated - elements in the queues 02 , 05* we 

shall store generating elements 

4 

The invariant P nay he tramei-crned as follows : 

F 5 s y e 02 -^SEEsCj] e 02, z <£ ~>SETX[;jJ e <5] (3-38) 
We make the foil owing substitutions to obtain the program in 
Figure 3-5 • 

(i ) head ( 02 ) — > 2 * head ( 02 ) + 1 

(ii) head (<£) -—a. 3 /# head (05) + 1 ( 3 - 39 ) 

(iii ) 02 <£=■ 2 * SETX [ i ] + 1 ; — > 02 4=r. SETx[ i ] ; 

(iv) <==. 3 * SETX [i ] + 1 ? — ^ SETX- [ i] ; 

Tr ansf arm ati on 3.2 

With 02 and Q5 as defined after transformation 1 , we observe that 

#■ 

they are final subsequences of SETX. Therefore, they may be implemented 
on the array SETX with the help of pointers to the heads of the queues. 
The invariant 1? may be transformed an follows: 

P 6 = P Q A A ? 2 A P^ (3-40) 

P 3 “ P 3 ^ 7 £ 52 3 > 02PTR, z e 05 ^ CgPTE ] ( 3-41 ) 

02PTR and Q5PTR are pointers to the heads of 02 , 05 respectively. 


where 
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,5 true ^ 

1 , SETZ [ 1 1 := 1,1; 

02 SETZ [i ] ; QS 4=- SSTZ[ i ]; 



while i ^ IT do 
begin 


i : = i + 1 ; 

if 2 * head (Q2)+1 3*head( 05 )+1 then SETZfi ] := 2'- A head ( 02 )+1 ; 

P<?P(02)? 

else 'if 2 *head (Q2)+1 = 3%ead(<£ )+1 then SEflRi J := 2*head(02)+1 ; 

BQ'B ( 02 ) ; ?op(Cg); 

else if 2 *head (Q2)+1 > 3*head ( )+1 then SETz[i ] := 3*head(^)+1; 

POJ2(<B); 

fi 

02<^=SETZ [i] ; <£^pSETZ[i] ; 

end 

^P 5 A (i = II) 5 

l=j 


Figure 3.5: Program after Transformation 3.1 
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We nake the following substitutions in Figure 3-5 • 

(i ) head Cp ^ SETS Q2PTR 

(ii ) head Cg — SETX ■ CgPTR 

(iii) P0?( Q2 ) ; — ^ Q2PTR := Q2PTR + 1; (3-42) 

(iv) POP. . ( Q5 ) ; — - >.C3PTR := Q5PTR + 1; 

(v) 02 < 4 ~- SKD]{[ i ] ; ^ ^enpty 
(vi) <£4=rSBTx[i] ; — ^ empty 

Besides the above substitutions, the initialization 
Q2PTR, CgPTR := 1,1; 

is needed to establish P^ initially. As a result, the program in 
Figure 3-6 is obtained. 

Tramsf omoti on 3>3 

In Figure 3-6 we see that the expression 2 * SETX [G2PTR ]+ 1 
and 3 * SETX [Q5PTR ] + 1 are frequently computed. These frequent 
c cmputati ons can be avoided through the standard technique of common 

( A *2 -j r* ^ 

subexpression elimination^ ' >J . The result of such elimination 

appears in Figure 3-7. 

The beginning steps of our development of the program were on 
the lines of classical stepwise refinement. Later, however, a deviation 
occurred vhen we Solved two simpler problems first, which made the 
’discovery 1 of the appropriate higher level information structure 
natural. 

Another point to note is the introduction and subsequent elinin tion 
of the queues. The queues here are an explanatory device, which luckily 
bhsonot affected the efficiency of the final program. 
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/true ? 

V 

i, SEES 1 1 j := 1,1; 
<£PTR, (£PPR := 1,1; 

£ i * * * * 6 3 

while i IT do 


begin. 

i : = i+1 ; { 

if 2*SETX 02PTR +1 < 3*SEPX [CgPTR] +1 then SEPX[i] := 2*SHTZ [Q2PTR]+1 

Q2PPR := Q2PTR+1| 

else if 2*SETX [Q2PTRJ+1 = 3*SE1X [®PTR >1 t&en SEPX i := 2*SETX[ 

- . 

•: Q2PPR := Q2PTR+1 ;''3F.J: :r- 

v 1 ; ®PERj=<®PTH+lj 

else if 2*SETx[ Q2PTR]+1 >3*SEIX[<£PTR]+1 then SETX[i '] := 3*SE1X[C£PDIEI] 

1 • ' CBPTR := ^PTR+1 ; 

fi- 
end ’ ' 


^p 6 /\ (i=u); 

H 


Figure 3—6 s Program after transformation 3»2 


i, SEPxCl ] := 1,1 j 
Q2PPR; (3P1R := 1,1; 

J2 := 2*SEIX [ Q2PTR] +1 

while i f I do 


X3 


:= 3*SETX [ CgPTR ] + 1 ; 


i := i+1 ; 

if X2 < X3 then SETX[i ] := X2; 

CSPTR := 02PTR+1 ; X2 := 2* SE1X[Q2PTR] + 1; 
else if X2=X3 then SETX[i ] := X2; 

02PPR : = Q2P1R+1 ; X2 := 2*SETX[ Q2PTR]+1 ; 
Q5PPR := CgPTR+l ; X3 := 3*SET}£ <£PTR] + 1 ; 

else if X2 > X3 then SETXT i 1 := X3 5 

<^PTR := ^PTR+1 ; 23 := 3*SEPX [ f^PERJ 


+ 1 ; 



Figure 3-7 : Program after transformation 3 .3 
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Late” we derived Figure 3-4 from Figures 3-2 and 3-3, using a trans- 
formation, which doesnot preserve meaning. In fact, its purpse is to alter 
the objective sets of the programs involved. While the transformation in- 
volved in deriving Figure 3—5 from Figure 3—4. does not alter the meaning of 
the program as a whole , it dees change the meaning of the information struc- 
ture. This change in the meaning the information structure enables appli- 
cation of further optimizing transformations to Figure 3-5. These optimi- 
zing transformations could in theory be performed mechanically. 

In the process of construction outlined, proof of correctness of 
programs also undergoes parallel transf omations, along with programs, to 
yield the final proof of correctness. This is an interesting development 
and may be useful in verification of programs. 

The observations made above are further illustrated by the following 
example . 

Example 3-2 

Sort a set of IT integer variables in ascending order. All the variables 

are eitherl! * s., i.2-is .oip.3 .-The variables initially stored in an array A, 

of size IT. 

The initial and final conditions to be satisfied by the program appear 
below: 

Initial condition 

I s j ^N)(A[j > 1) V (a[ j 1 = 2) V (Aft ] = 3) (3-43) 

final condition 

O head2-' and head 15 )(l ^heddl ^ H+1 ) A (l, 4head33 ^ F+1 ) 

-((^ : 1 < head! 2 ) (a[ j ] = l)) 

* 'head2 - 1 < h>ad3 ■ )(A [ 1 ] = 2;) ^ 3-44 ^ 

- — r'"- ' .. , -,\/.r 1 „w 
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R slates that there exist head2 2 and hea<333, two points of aaaxBsssinai 
points, which partition the air ay A into three parts containing, T ’s, 2's 
and 3's respectively. 

An abstract version of the program appears in Figure 3-8, where P.is 
an invariant yet, to be derived. 

.. ■ 

'Initialize ’ ; 

M 

while k do 


begin 


’4, step towards K = N udder invariance of P f ; 


end 


l? A (K = N) | 


Figure 3-8 : Abstract program for Problem 3-2 
As in the previous example, we shall first solve two simplified 
problems. - . 

Simplified Problem 3-2.1 

Sort a set of integer variables in ascending order. All the variables 
are either I's or 2's. 

The initial and final conditions*to be satisfied by the program 
appear as below. 

Initial condition 

I 1 5 (*d : 1 ^ Z 4 N) (A b 1 = 1 ) V (A [j ] = 2) (3-45 ) 

Pinal condition 

R 1 a ( 3 head2c)(l ^ head22 < H+1 ) 

((V| : 1 ^ j < head 22 ) (A [ j ] =l)) 

((^ : head!: ^ H)(A [l j- 2>) 


(3-46) 
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Interpretation of S'? is similar to that of E. Abstract version of 

the program may be obtained by replacing the assertions arlc| 1 ‘in 

• - 1 - 1 - 1 

! Eigure 3 J -'8 vvifK-E r ,T -ahd E respectively.. 

YIe may transfer all I’s to the lower part of the array A to sort the 
given elements. 

_m , *j 

Hie invariant P "may be written as a generalization of E as follows: 

P 1 E (l ^ i ^ ET+1 ) ,A (0 k <C S) /\ (k = i - 1 ) 

( ( 3 head2- ) (l ^ head2? <; i) (3-47) 

A C(Vj * 1 3 <JieacB. )(A [3] =l)) 

(¥4 : headZ <1 <i)(A [l ] = 2))) 

With the above invariant, it is easy to prove the correctness of the 
program in Figure 3-9. 

Simplified Problem. 3-2.2 

Sort a set of integer vairiables in ascending order. All the variables 
are either 2 1 s or 3 ! s . 

Preceeding • as before, the initial and final conditions may be written 
as follows : 

Initial condition 

I 2 5 j $IT)(2:[3 ] ,= 2) V Uh 3=3) (3-48) 

Pinal condition 

B 2 5 ( 3 hea<33 3 ) (l head 35 ^ N + 1 ) 

/\((^J- : 1 $. 1 < head33 ) (a[i 3 =2)) 

A ((% : head33 ^ m ^F)(A[m] = 3)) 


(>- 49 ) 
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Abstract version of the program. nay be obtained by replacing the 

2 2 2 

assertions I, P and E in Figure 3-8 with I , P and E respectively. 

We shall sort the elenents by transferring all 3's to upper part 
of the array A. 

2 

The invariant P nay be written as follows: 

P 2 = (l < i 4 N + 1 ) A (0 ^ k U) 

(( 3 head3 ) (i 4 head3 < BT + l) (3-50 ) 

((¥1 : 1 £ 1 < i ) (A [l 1 = 2)) 

((¥n : head3 $■ d H)(A [j ] = 3))) 

Using the above algorithms and the invariant, we nay write the re- 
quired program as in Figure 3-10. 

To prove the correctness of the program, it is sufficient to note 

that 

fc = i + T (ll - head3 ) (3-5 1 ) 

This trivially follows from the code in the while loop in Figure 
3-10, where in each execution of the loop, either 'i ' is incremented or 
'heads 1 is decremented, by one. 

Also, 

P 2 A (k = N) A (k = i + (n - head3 ) ) =# E 2 (3-52 ) 

YfiLth the above analysis, it is to prove the correctness of the program 
in Figure 3-10. 

Solution of Original Problem 3-2 
We observe that 

E 1 A E 2 E (3-53) 

P * P 1 ^ P 2 


(3-54) 



vfaile k ^ l'I do 
“be gin 

if A [i] = 1 then A[head2 ]:= A[head2] , A[i } 
head 2 := hend 2 + 1 ; i := i+ 1 ; 
else if A |i] = 2 then i := i + 1 ; 
fi 

k := k + 1 ; 

end 

^P 1 A (k = h T ) j 

3 

Figure 3-9° A solution for the subprogram 3-2.1 




k,i, head 3 •= 0 , 1 , N + 1 j 

vdiile k A N do 
begin 

if A [i] =2 then i := i + 1 5 
else if A [i ] = 3 then head3 •- head3 - 1 ; 


k +1 < 


A[i] , A[head3 ] •= A[head3] , A[i] 


end- — 


*(P 2 A (k=l) J 

A 2 3 


Figure 3-10: A solution for subprogram 3-2.2. 
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and simply merge the two solutions, we get the required solution to the 
original probien and it appears in Figure 3-1 1 . 

The proof of correctness of the above solution is quite easy and is 
left to the reader. 

Optimizing Transf omation 3-2.1 
From (3-51 ) 

(k = S) A (k = i + (N - head3)'-^(i = head3) (3-55) 

Since the variable 'k ! is not used actively any where in the program, 
it nay be eliminated and the loop terminating condition (k = u) nay be 
replaced by (i = head3). 

Transforming the invariant P, we get 

F 5 - P [ (0 k ^ N) — true, (k = i - 1 ) — > true J3-56 ) 
Applying this transf omation to Figure 3—1 1 ? we get Figure 3-12. 

As in the solution of the Probien 3-1, we obtain two problems by lirx 
tag -the values- -of the-. variables. Solutions to the above problems, along 
with their proofs of correctness were then combined to build the solution 
for the Problem 3-2. 

In the next chapter, we shall discuss some variations in the moaning 


altering transf onnations 



k,i, head2, head3 := 0,1,1, II + 1j 

hi 

while k ^ IT do 
begin 

if aU =. 1 then A[i ] , A head2 := AChead2 % aCi \ 
headPl := head2 + 1 ; i := i + 1 ? 
else if j[ i] = 2 then i := i + 1 ; 
else if A[iJ = 3 then head3 := head3 - 1 > 

A[iJ, A[head3-J '= i£liead3 -j, A 
fi 

k := k + 1 j 


end 

Sp A (k = N) \ 

M 


Pigure 3-11 : A solution for the Problen 3-2, 



i, head2, head3 := 0,1,1, II + 1; 



-vigil e i ^ head 3 do 
begin 

if il[i ]= 1 then A[i] , ^[head2] := A[head2J , A[ij 1 
head2 := head2 - + 1 1 i := i + 1 j 
else if A [i ] = 2 then i := i + 1 » 
else if A[i] =3 then head3 := head3 - 1 1 

aGl J, A[head3^ := A[head3 ], A[i ]; 
fi 

k := k + 1 ; 


end 

b 3 A 

i E j 


(i' = head3 ) ^ 


Figure 3-12: Final solution for the Problem 3-2 



4. VARIATIONS 


In the previous two examples, we were able to combine the solutions 

for the simpler problems without much difficulty because the solutions 

meshed together nicely. This may not always be the case and some other 

strategy must be found to combine the solutions to simpler problems. The 

following example, illustrates two strategies for combining the programs 

( 10 ) 

This example has been adopted from lucena. 

Example 4.1 PRINTING- FEOH CARDS 

Text punched on computer cards is to be printed on a line printer. 
All cards except the last one contain 80 characters. The last card has 
characters upto and including the character r @ 1 , indicating the end of 
the text. Each line printed must contain 132 characters. 

One may naturally divide the above problem into two subproblems . 
one for reading a card and the other for assembling and printing a line 
If we code this two subproblems, Figures 4-1 and 4-2 come to mind. 

We observe that the two subproblems are simply implemented through 
counting loops. However, it is not straight forward to combine the two 
solutions, since the input and output records have different lengths. 

We may retain one of the solutions and unfold the loops of the other, 
while combining them. For example if the solution for the 'assembling 
Find printing 1 is retained, we get the program in Figure 4-3 • 

There is another way of combing these solutions. The two processe 
for input axid output can run in parallel, provided the ktfe character is 
assembled in the output record before the k+1^. character is selected 
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integer ; character array card [l :80 J ; 

character char; 

repeat 

read (card); i := 1 ; 
repeat 

char := card[i] ; 
process char 
i := i + 1 ; 

until (i )> 80) V (char = l @ l ) 
until char = x @'c 


Figure 4-1 : Read a Card 

integer character array line [l :132] ; 
character char; 
repeat 
3 s = 1 5 

repeat 

^obtain one character J 
linetj] := char; 

3 := 3+1; 

until (3 > 132 ) V (char = *e‘) 
vvhile 3 4s. 132 do line[ 3 ] == 1 * ; 3 : = 3 + 1 5 

print (line ) ; 
until char = 


\ 


Figure 4-2 : Assemble and print a line 
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integer i, 3 ; 

character array card [ 1:80 j ; line [ 1 : 132 ] ; 
character char 5 
read (card ) ; i := 1 ; 
repeat 
3 '•= 1 , 
repeat 

if i ^ 80 then read (card ); i := 1 ; fi 
char := card [i j; 
line [ 3 ] := char; 
i := i+1 ; 3 := 3+1 ; 

JEgatil (3 > 132 ) V (char = W) 
while 3 132 do line [3 ] := 1 ’53:= 3+1 ; 

print (line ) ; 

1 1 

until char = @ 


Figure 4 - 3 : A complete solution for printing from cards 
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buff er - monitor 
begin 

c haracte r bufchar; 
boolean full; 

condition nonempty; nonfull; 

} roceduie^ gxvecb.n? (r, i character ); 
begin 

if full t hen nonfull , wait ; fi 
bufchar := it; 
full := — [full; 
nonempty . signal ; 
end - ■, givechar ; 

pro cedure getchar (x : character ); 
began 

if full then nonempty, wait ; fi 
x := bufchar; 
foul — 1 full; 

nonfull. signal ; 
end getchar; 
full := fal se ; 

^nd buffer 


jBlgure 4-4 (Part i): A parallel solution for 
printing from cards. 
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cobegin 

input : begin 

integer i; 

character array card [ 1 : 80 J 

character inchar ; 

repeat 

read (card); i := 1 ; 
repeat 

inchar := card 1 i] ; 

buff er. give char (inchar .) ‘ 

i := i+1 ; 

until (i 80 ) Y (inchar = '©’) 
until inchar = I @* 
end 

output : begin 

integer 3 ; 

character array line [l :132 j; 
character oautchar; 
repeat 

buffer* . rgetchar (outchar)’;, : line [j] := out char; 

3 := 3+1; 

until (3 >132) V (outchar = *©') 

while 3 < 132 do line [ 3 ] *= ' *? 3 *= 3+15 

print (line ) ; 
until outchar = 
end 

coend 


Part II 


Figure 4-4 : A parallel solution for printing from, 
cards. 


1. * t . ’ * t* Ld* 

CENirt I3RARY 
.... _ 
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abstraction, at high level, one can easily express this timing inter- 

(Hoare,4) 

relation between the two processes. A solution using monitors , 

to express this inter relation, appears in Figure 4-4. 

The above example shows that integration of programs may become a 


difficult task, and for some programs manual integration of programs ma 
be prone to errors. Tfe may need a programming environment aiding in 
systematic transformations in order to practically program in this mann 
Until now, we have been working on procedure dominated problems. 
There is a class of problems, where the efficiency of the solution depe 
ds solely on the data, structure selected. It would be natural to explc 
whether meaning altering transf ormati on could be used to develope attri 
butes of a data structure, in order to efficiently solve a problem. Th 
following example illustrates that it is indeed possible. 

Esample 4-2 

large sets of records are usually organized as binary trees to 
facilitate efficient Bearching of bugs. Since different organizations 
of binary trees give different average performance for searching of a 1 
it is natural to ask about the best possible tree for searching a table 
of keys with given frequencies. For example, the optimum tree for 
most c ommon English words is shown in Figure 4-5 » it requires only 

3.437 comparisons for an average successful search. 

The Hu-Tueker algorithm^’ 8 ) constructs such a binary tree for 
the special! case, viien a key will always be found. Fhase 1 of the 
algorithm constructs a binary tree, which can then be transformed into 
an optimum binary tree. If appropriate data structures are used, this 






4-0 


Hie problen is to develop the data structures for the Haase- 1 
of this algorithn. This phase of the algorithm is given below. In 
the following, the external nodes represented keyg and the respective 
weights their frequency of occurrence. 

Step 1 : Start with a working sequence of weights written inside of 
external nodes, -S^ ... 2 » 

Step 2 : Repeatedly combine two weights q^ and q.., for i <C j into a 

single weight (q^ + q ) deleting the node containing q^ from 
the working sequence and replacing the node containing q^ 
by the internal node containing (q^ + q^ ) (4-1 ) 

This combination is to be done on the unique pair of 
weights (q., q.) satisfying the following rules: 

(i) Ho internal nodes occure between q^ and qr. 

(ii) The sun (q^ + q^ ) is mininun over all (q^, 0^ ) satisfying 
rule (i). 

(iii) The index 'i* is minimum over all (q^d^) satisfying 
rules (i) and (ii). 

(iv) The index 1 j 1 is minimum over all (q^, q ... ) satisfying 
rules (i), (ii), and (iii). 

The nodes may be identified by a triple (index, q, external). 

'index* describes the position of the node in the working sequence and 
q the weight. If 'external* is true, the node is external, otherwise 
it is an internal node. 

Hth the clove data structure, we may write down an c . ’■ - - 

cf the program satisfying only rule (i), as it appears in Figure 4-6 (a). 



41 


In the program, a pair of nodes with no internal nodes between 
then is repeatedly needed* It nay be advantageous to keep such nodes 
in a set. Initially, only two adjacent external nodes will be in sucn 
a set* 

Once the nodes are arranged in such a structure, they satisfy uhe 
f oil owing p rop crti e s : 

1 * An external node may be a member of t, at most two sets* 

2* An internal- node is a member of only me set,. 

3. When two nodes are combined, node belonging to the sets to 
which either or both the nodes belong, also have no external 
nodes among them* Hence, these sets may be replaced by -their 
union* 

4. There may be at most 3 such sets* 

* 

The program with the refinement in' the data structure appears in 
Figure 4-6 (b). 

We may, now, apply Rule (ii) of the algorithm to refine the data 
structure st il l further. Sun of weights of the selected pair of nodes 
must he minimum over all such pairs. It follows that the sum must also 
be minimum over all pairs of nodes helongj^o a set. Transforming the Sv. 
sets into ordered sets, ordered in ascending order of node weights will 
help in selecting a minimum weight sun pair. In addition, these orderec 
sets nay be arranged, in ascending order of respective minimum weight 
sums, to make the selection of a minimum weight— sum pair trivial. 

At this stage, part of the program in Figure 4-6 (b) nay be 
transformed to give Figure 4-6 (c). 
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13 initialise 1 
repeat 

2 : ’Find two nodes with index i and j such that there is no 
external node between then and i j 1 

3: 'Remove node with index 3 , and replace node with index a , 
with an internal node (i, < 3 ^, <3.., false ) ’ . 
until 'one node is left’ 

(a) Top level abstract program, satisfying only rule (i) 

1 : ’Prepare sets of nodes with no external nodes between then’ 
repeat 

2.1: ’Select a set and two nodes belonging to it 1 
2.2: ’Replace the sets to which either or both node belong, 
with their union 1 

3 : 'Remove node with index j and replace node with index i, 

with an internal node (i, < 3 . + 2 . , false ) 

until T one node is left 1 

(b) Progran vdth refined data structure, satisfying 

rule (i), ” ±i 

2.1 : 1 Select the first ab&ered set fron the master order set 
and select the first two nodes fron the tuple T 
2 . 2*1 'Replace the ordered set to vdiich either or both of 
selected nodes belong, with their ordered union 1 
2.2.2 ! Update the master ordered set* 

(c) Further refinement to satisfy tcul^s (jii.),, (iii)^-and (iv 


Figure 4-6 : Phase-1 of Hu-Pucker Algorithm. 
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Applying rule (iii), where minimum index 'i ' is required, nodes 
with equal weights in an ordered set may be arranged in order of their 
index. S imil arly ordered sets with equal minimum weight sums may be 
arranged in order of index of the first node belonging to them. Buie 
(iv) may be applied to take care of ties in the above arrangement. The 
ordered sets with equal weight sums and same first node index, may be 
arranged in order of the index of the second node beloning to them. 

With the above data structure and its attributes, we only need to 
select its implementation, in order to get a program suitable for com- 
piling. 

We have ordered tsaefs- and an ordered master -seta on which 
following operations are carried out: 

1. Add or delete a node (ordered set) in an ordered set 
(master ordered set). 

2. Merge at most 3 ordered sets at every stage. 

So efficiently carry out the first operation of addition and 

delation an ordered lbcis' ! (master r set ) the natural data structure 

as a binary tree. It takes O(log n) time to add or delete a node 

from a binary tree. While there are several ways in ?hich a binary 

tree could be organized, only with a heap or a leftist tree, can one 

( 8 ) 

merge two trees in O(log n) time. Shus, the ordered sets and the master 

ordered set may be implemented as either heaps or lefitst trees to 

efficiently program the - Pha'se-1 ‘of-the-Hu-Sucker algorithm. 

It is only a mechanical Job® to transform our program, using 

standard primitives and implementation of addition, deletion and 

(T 3 ) 

merging of heaps or leftist trees) * 
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Let us summarise the process, adopted in solving the above problem. 
Le simplified the algorithm to aid in finding a suitable arrangement of 
the information. Then, we gradually added rules one by one, at the same 
time adding new attributes to the information structure. Finally, having 
known the attributes of the information structure and the operations on 
it, we picked an implementation of the information structure, to effi- 
ciently carryout the given operations. 

The following example illustrates use of meaning altering trans- 
formations in hardware implementation of multiplication algorithms. This 
example has been adapted from Karta.shev^^ 

Example 4-3 : Multiplication .Algorithms 

Hardware multiplication circuits are usually implemented as a 
series of additions and shift operations. 

Let E^ and E^ be the multiplicand and multiplier registers of 
length n bits. The product of these two registers will be hfnlBiagthj 2n, 
and may be stored in E^, the register in which partial sums are stored. 
Let y be the adder circuit and — be the shift circuit, where the 
direction of the arrow indicates the direction of the shift. 

The following example explains how human beings multiply two 
numbers. 


+ 1 * 

+ 1 * 

+ 0 * 

+ 1 * 


1010 
X 1001 
00000000 
1010 
10100 
101000 
1010000 


E 1 

E 2 

1 


*3 =£ 


; E 1 


01011010 
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Tn order to implement such an algorithm, we need registers R.j 
and R^ of size 2n» This algorithm is described below: 

Algorithm A 

: [initialise] i := 1 5 R^ := 0 
Ag : If i = n terminate 

Shift right R . If least significant bit (LSB) of Rg is 0, 
go to Aj, else go to A^. 

( 4 - 2 ) 

: [shift R^ without adding] 

Shift left R^ and go to A^ . 

A^ : [add R^ to and shift] 

R, := E_ + R. , shift left R„ . 

3 3 1 ’ 1 

A^ : i := i+1 , go to A g . 

The hardware realization of the above algorithm appears in Figure 

4 - 7 » 

If the partial sum register R^ is shifted right instead of R-j 

being shifted left, the effect of algorithm remains unchanged. R^ 

may now be added to the most significant bits of R^, and it is possible 
an 

that there is/overflow. To take care of this possibility, overflow bit 
the adder 

of /may be fed to the most significant bit (MSB ) of R^. The advantage 
of the above transformation is that R^ need only be of length of n. 

The following example illustrates algorithm after the above 


transf armati ons. 
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1010 
X 1001 
00000000 
+1* 1010 

10100000 
0101 0000 
+0* 1 01 0 

01010000 
00101000 
+0* 1010 

001 01 000 
00010100 
+ 1 * 1010 

10110100 
01011010 

Hie above algorithm has been described below: 

Algorithm B 

33.J : [initialise ] i := 1 , E. ;= 0 

Bg : If i -- n terminate 

Shift right Eg. If LSB of Rg is 0, go to B^ 
else go to 

B^ : [shift E^ without adding] 

Shift right R^ and go to B^ . (4-3 ) 

B^ : [add and shift E^ ] := R^ + Rg x 2 n 

Shift right R^, feed the overflow bit of the adder 
to MSB of E^ . 

B,_ : i := i + 1 , go to Bg . 

The hardware realization cf the above algorithm appears in Pig. 

4 — 8 » 


4 

I = £ 

*3 

K — > 
E i 

% 




In the implementation of above algorithm, at £^. stage, left 
most i bits of Eg are all zeroes.' Also, during addition of R^ to R^, 
right most n bits of are not modified and rightmost n-i bits are 
zeroes. The remaining i bits of E^ may be stored in Rg to reduce the 
length of R^ and the adder circuit. Hie final result appears in the 
registers E^ and Eg combined. 
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After the above transformations, the algorithm B appears as 
algorithm C, below: 

Algorithm C 

C 1 : /[initial! : -e j i := 1 , R^ := 0 
a If i = n terminate 

Shift right E g . If LSB of R g is zero, go to 

else go to . (4-4) 

[Shift R^ without, adding] 

Shift right Ej MSB of R g := 1SB of R^ 
go to C,- . 

C 4 : [ add and shift R^ ] 

•' " shift right R^. Peed averflow bit of the 

adder and LSB of R^ to MSB's of Ej and R^ respectively. 

: i := i+1 , go to C 2 * 

The hardware realization of the above algorithm appears in Figure 

4 - 9 . 

In the above example, we successively applied meaning altering 
transformations to various registers and improved algorithms to reduce 
the cost of hardware . 

The variations of meaning altering transformations described 
in this chapter, by no means, exhaust the class of such transformations. 
This class of transformations will have to be acymented in order , to be 
effectively and conveniently used. 














5. conclusions 


Through -various examples, we have seen how meaning altering trans- 
formations, together with other programming techniques, may be used for 
the development of a complex algorithm and/or data structure. If a pro- 

f 

blem is simple, it is easier to program, prove theorems about the program, 
and understand.it. Easily' provable and understandable programs for the 
related problems are combined or extended to buildiup the final solution. 
In parallel with the above process, proofs of correctness, of programs 
being combined, may also be combined to give a proof of correctness of 
the final solution. 

The practicality of structured programming in delivering robust, 

(a) 

usable programs is not beyond doubt. As Ehuth v ; quotes, "people can 
argue that structured programs, even if they w6rk correctly, will look 
like laboratory prototypes where you can discern all the individual compo- 
nents, but which are not daily usable. Building 'integrated products' is 
an engineering principle as valuable as structuring the design process. " 

He also quotes the plans for a prototype system that will automatically 
assemble integrated programs from well-structured ones that have been 
written top-down by stepwise refinement. Such a system, with suitable 
modifications, would be very useful for programming with meaning altering 
transformations. 

Programming through transformations and integrating programs are 
complex tasks and may be prone to errors if performed mannually. It would, 

m 

be worthwhile to have such a technique mechanized. Knuth. has given 
the following comments on interactive program manipulation system: 
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"PrograMrier using such a System Mil white his beautifully struc- 
tured but possibly inefficient program *, thefi he will interactigeljf Specify 
trarisf oraiations that Make it efficient* Such a system mil be much more 
powerful and reliable than a completely automatic one * * * » 2he original 
problem Should be retained along with, the transformations Specifications^ 

so that it can be properly understood end Maintained as time passes l 

(i6) 

Standish and others ^ 1 have designed a system based oh the above 


comments and the Irvin program, trhnsf omati on Catalogue* ; Such a pro- 
gran manipulation system May be extended by including Meaning altering 
trsnsf ormati cns . Such a System, alohgwLth a System, that San combine • 
programs as well as their proofs of Correctness) may emerge as a future 
system to aid in program, development * .proving and maintenance* 


ihthre. WOfk 



A few Meahihg altering tranSf ormatiohS hay§ be§h listed hefei Siij^ 
necessarily dohot exhaUst all possibilities* A Catalogue Of Mich trans= 
formations would be Useful in further Strengthening oiir programming ibiiifjri 



A program manipulation system whifih can change the messing of pfsgf&msj 
needs further research) before it 6 ah be implemented * Program integration 
has to be an essential feature of the system i Vafious methods of pfOgfaeaS 


Morage and program integration algorithms need to be investigated i if 
pregrams are to be combined of merged* their file' stfubturg need to be 
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3 • Manipulation of Proofs of Correctness of Program 

Along Tdth manipulating programs , their proofs of correctness could 
also be manipulated. When a complex problem is decomposed into several 
related problems, the input-output assertions of the original problems 
could also be decomposed to obtain input-output assertions for the rela- 
ted problems. When the related problems are combined or their meaning is 
changed, same process may be carried out on this proofs. A system which 
manipulates proofs in this manner may be mechanized. Work in this direc- 
tion may result in interesting correctness proving techniques. 

4. Area of Automatic Program Synthesis 

Another related area of investigation may be the area of automatic 

program synthesis. The automatic program synthesizes of Manna and 

(l 1 ) 

Wal dinger may be extended by a system which simplifies input-output 

assertions, synthesizes programs for these problems and then combine them 
to give the final program. 

5 . Application in Chief Programmer Team Management 

(l) 

The chief programmer team management technique of Baker nay be 
extended by the use of meaning altering transformations,. The chief pro- 
grammer may simplify the given task recursively to yield a set of related 
programs; then he may give a set of transformations to be applied, to his 
programmer team. He may explain the use of such a transformations on 
trivial example problems. 
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